Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255181 7.5 危険 Google - Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題
CVE-2008-0986 2011-03-1 14:58 2008-03-6 Show GitHub Exploit DB Packet Storm
255182 6.8 警告 Google - Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0985 2011-03-1 14:56 2008-03-6 Show GitHub Exploit DB Packet Storm
255183 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性 CWE-119
バッファエラー
CVE-2010-3081 2011-03-1 14:46 2010-09-21 Show GitHub Exploit DB Packet Storm
255184 4.6 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0291 2011-03-1 14:44 2010-02-15 Show GitHub Exploit DB Packet Storm
255185 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の sctp_process_unk_param 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1173 2011-03-1 14:43 2010-05-7 Show GitHub Exploit DB Packet Storm
255186 2.6 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- RHEL の MMIO 命令デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0730 2011-03-1 14:42 2010-05-6 Show GitHub Exploit DB Packet Storm
255187 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の drivers/connector/connector.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0410 2011-03-1 14:41 2010-02-22 Show GitHub Exploit DB Packet Storm
255188 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux Kernel の azx_position_ok 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-1085 2011-03-1 14:40 2010-04-6 Show GitHub Exploit DB Packet Storm
255189 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux Kernel の ULE decapsulation functionality におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-1086 2011-03-1 14:39 2010-04-6 Show GitHub Exploit DB Packet Storm
255190 4.7 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- x86_64 プラットフォーム上の Linux kernel の load_elf_binary 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0307 2011-03-1 14:38 2010-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220991 9.8 CRITICAL
Network
freebsd freebsd In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level … CWE-345
 Insufficient Verification of Data Authenticity
CVE-2019-5613 2024-11-21 13:45 2020-02-19 Show GitHub Exploit DB Packet Storm
220992 6.5 MEDIUM
Network
gitlab gitlab An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions. CWE-863
 Incorrect Authorization
CVE-2019-5474 2024-11-21 13:45 2020-01-28 Show GitHub Exploit DB Packet Storm
220993 7.5 HIGH
Network
gitlab gitlab An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments. NVD-CWE-Other
CWE-269
 Improper Privilege Management
CVE-2019-5472 2024-11-21 13:45 2020-01-28 Show GitHub Exploit DB Packet Storm
220994 6.1 MEDIUM
Network
f-revocrm f-revocrm Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2019-6036 2024-11-21 13:45 2020-01-27 Show GitHub Exploit DB Packet Storm
220995 5.5 MEDIUM
Local
fortinet fortios Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the k… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-5593 2024-11-21 13:45 2020-01-24 Show GitHub Exploit DB Packet Storm
220996 7.1 HIGH
Local
rapid7 appspider The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijack… CWE-613
 Insufficient Session Expiration
CVE-2019-5647 2024-11-21 13:45 2020-01-23 Show GitHub Exploit DB Packet Storm
220997 7.5 HIGH
Network
anglers-net cgi_an-anlyzer Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer. CWE-522
 Insufficiently Protected Credentials
CVE-2019-5990 2024-11-21 13:45 2020-01-6 Show GitHub Exploit DB Packet Storm
220998 6.1 MEDIUM
Network
anglers-net cgi_an-anlyzer DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Ob… CWE-79
Cross-site Scripting
CVE-2019-5989 2024-11-21 13:45 2020-01-6 Show GitHub Exploit DB Packet Storm
220999 6.1 MEDIUM
Network
anglers-net cgi_an-anlyzer Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Pag… CWE-79
Cross-site Scripting
CVE-2019-5988 2024-11-21 13:45 2020-01-6 Show GitHub Exploit DB Packet Storm
221000 8.8 HIGH
Network
anglers-net cgi_an-anlyzer Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page. CWE-78
OS Command 
CVE-2019-5987 2024-11-21 13:45 2020-01-6 Show GitHub Exploit DB Packet Storm